Skip to content

K
k3s
Commit 983435bd authored by WanLinghao's avatar WanLinghao
Browse files
Options

modified: staging/src/k8s.io/apiserver/pkg/endpoints/filters/authorization.go

parent 5911f87d
Hide whitespace changes
Inline Side-by-side
Showing with 1 addition and 0 deletions
staging/src/k8s.io/apiserver/pkg/endpoints/filters/authorization.go
View file @ 983435bd
...@@ -47,6 +47,7 @@ func WithAuthorization(handler http.Handler, requestContextMapper request.Reques ...@@ -47,6 +47,7 @@ func WithAuthorization(handler http.Handler, requestContextMapper request.Reques
return return
} }
authorized, reason, err := a.Authorize(attributes) authorized, reason, err := a.Authorize(attributes)
// an authorizer like RBAC could encounter evaluation errors and still allow the request, so authorizer decision is checked before error here.
if authorized == authorizer.DecisionAllow { if authorized == authorizer.DecisionAllow {
handler.ServeHTTP(w, req) handler.ServeHTTP(w, req)
return return
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment